We would like a feature that requires all users, even admins and super-admins, to be forced to use SSO, as a checkbox setting that can be enabled or disabled via Admin > Security > SSO.
As of v2.48, if SSO is enabled for the instance, admins and above are routed through SSO first when attempting to log in and will only see a password option if SSO fails (to prevent lock outs if SSO is set up incorrectly).
Red Handle
•
Oct 26
Hudu needs a break the glass platform admin, doesn’t need ability to read or edit content. Only fix user accounts, SAML/SSO, IP restrictions, and group security.
Purple Blueberry
•
Jan 28
I can certainly appreciate the need to have an admin account able to bypass SSO for break-glass purposes, but it would be far better if we could nominate a single admin account for this purpose rather than allow all admins to bypass SSO. SSO with Entra affords us lots of additional protection controls via Conditional Access which are effectively lost if all admins can simply bypass it.
Log in to comment and vote
Comments3
Oct 22
PinnedAs of v2.48, if SSO is enabled for the instance, admins and above are routed through SSO first when attempting to log in and will only see a password option if SSO fails (to prevent lock outs if SSO is set up incorrectly).
Red Handle
Oct 26
Hudu needs a break the glass platform admin, doesn’t need ability to read or edit content. Only fix user accounts, SAML/SSO, IP restrictions, and group security.
Purple Blueberry
Jan 28
I can certainly appreciate the need to have an admin account able to bypass SSO for break-glass purposes, but it would be far better if we could nominate a single admin account for this purpose rather than allow all admins to bypass SSO. SSO with Entra affords us lots of additional protection controls via Conditional Access which are effectively lost if all admins can simply bypass it.